Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: YeISic2PNV+pOu69AINlJYiIp1uXe2X0x6LLxyYcMms=
Subject key identifier: 69:EF:E7:7A:30:4B:C0:45:67:D0:53:58:ED:E8:67:86:EB:6E:89:B6
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 0199FBEB73C0D4F1C993B95F0AC8690F81E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 0AD1
Signing time: Sun 19 Oct 2025 10:02:15 +0000
Manifest this update: Sun 19 Oct 2025 10:02:15 +0000
Manifest next update: Mon 20 Oct 2025 10:02:15 +0000
Files and hashes: 1: E6bot_tKJqCzADpBxFeKtsutgCs.roa (hash: IzVVajCV/IB0bxI8d5Bqo7CZjFjDagAuPrwaJPvu9o8=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: +SW7DY4yGPiulhpRf9p3z2fMFEX5We7q7Ti2QknR5t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:73:c0:d4:f1:c9:93:b9:5f:0a:c8:69:0f:81:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Oct 19 10:02:15 2025 GMT
Not After : Oct 20 10:02:15 2025 GMT
Subject: CN=69efe77a304bc04567d05358ede86786eb6e89b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:72:b9:ac:9a:d1:60:cb:0d:4b:c1:37:24:
93:02:3a:9b:8d:5e:0b:e5:2e:eb:e1:e0:5f:25:07:
b9:dc:37:b6:6c:dd:23:4b:c7:24:28:8c:db:35:7b:
e6:b0:6c:40:8e:19:97:5b:76:94:e6:b6:3c:79:03:
23:c4:6e:0b:45:8f:ce:49:0d:52:a6:cb:a2:0d:22:
91:65:79:ad:d8:61:7b:0e:eb:18:91:11:18:c8:52:
dd:27:25:09:45:7d:38:09:9d:58:bb:a2:f0:4d:5f:
6a:e9:c1:98:4a:d8:56:26:d3:ef:29:b0:a8:6b:b7:
15:d7:48:77:02:2e:44:1f:8f:cf:be:4c:0e:e1:5c:
85:ea:7c:f7:c4:34:ac:f6:71:53:4f:61:b2:2e:9a:
2b:90:f9:e1:e7:10:a2:fe:4b:50:89:7e:69:ab:3a:
16:5b:ae:e4:12:5b:46:70:fa:a4:97:e3:18:10:4b:
45:4a:5c:a3:1f:b4:ad:41:0b:34:ed:9b:b0:0e:9a:
a7:16:4c:40:8c:07:6d:bf:0b:72:5a:91:e0:bd:11:
13:39:e1:63:15:99:21:f6:8a:96:cc:d2:37:51:e3:
08:e3:50:a3:6e:c0:5b:62:14:93:42:3a:fb:a3:6a:
8c:d3:f2:a7:13:bd:71:fb:30:e1:96:34:d5:1a:d0:
69:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EF:E7:7A:30:4B:C0:45:67:D0:53:58:ED:E8:67:86:EB:6E:89:B6
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2b:fe:87:1e:20:82:b1:63:65:dd:17:7c:3e:4d:8b:b7:a6:
67:5f:1d:ea:ec:8a:b9:4e:6f:a8:6a:19:7f:fd:3d:59:1d:3d:
9e:a6:0b:90:15:23:24:bd:38:81:98:19:5f:7d:62:9e:71:47:
79:7d:5d:21:97:ae:df:11:08:2b:be:15:e9:0e:d9:d7:7d:68:
6a:be:65:2b:9f:80:01:56:af:96:1d:65:d5:5d:1d:f5:59:1b:
2c:cf:8a:5f:f0:f3:cd:7f:5e:3d:6e:97:1f:a0:a4:87:f3:3d:
33:f6:78:e6:e1:e5:07:19:21:8a:9f:47:1d:ca:ea:6d:7f:2d:
4d:5c:25:c2:fe:bf:af:3b:29:c5:b1:66:e0:e1:1c:ec:96:d6:
7c:9d:ab:fd:cb:6e:95:ad:6d:87:66:0e:06:bc:6d:fb:c5:68:
68:79:b3:7b:df:88:89:1f:3c:f2:71:71:7d:63:3c:dd:9f:50:
d9:4a:0a:61:27:47:be:54:fc:c9:fa:8f:e4:35:e6:5a:4f:6c:
51:fb:02:80:fc:e7:30:a7:fa:b1:e7:9a:a4:0e:59:f5:eb:6a:
46:0b:27:e8:cf:7c:c0:cc:ca:53:13:87:08:84:b8:06:b9:e6:
50:12:be:6c:22:d9:f0:e3:23:cf:9d:44:97:3b:d3:b5:63:6b:
4b:e1:30:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:28 2025 by rpki-client